Sql injection

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/appcomment/controller/commentstatus.php via $GET'id'...

CVE-2017-11416

Fiyo CMS 2.0.7 has SQL injection in /apps/appcomment/controller/insert.php via the name parameter...

CVE-2017-11416

CVE-2017-11416 : Fiyo CMS 2.0.7 contains an SQL injection in /apps/app_comment/controller/insert.php via the name parameter. Multiple connected sources (NVD, CVE lists, CNVD, PoIs) corroborate that a remote attacker can leverage this to execute arbitrary SQL commands. Exploitation status is not d...